Senior Infrastructure Security Engineer
Dublin - IE • FullTime
Posted 1mo ago
About the job
Crusoe is seeking a Senior Infrastructure Security Engineer to establish a high-assurance security posture through deep visibility and granular access controls. This role involves leveraging advanced tooling like Wiz to maintain an uncompromising security posture, using infrastructure service building as the primary mechanism to enforce these standards across our global compute platform. You will be instrumental in building the future of AI infrastructure with an energy-first approach.
Responsibilities
- Drive Infrastructure Security Posture Management (ISPM) and cloud-native visibility using tools like Wiz to identify risks and misconfigurations.
- Champion Infrastructure-as-Code (IaC) standards (e.g., Terraform) for secure defaults and immutability.
- Build automated security guardrails embedded into CI/CD and deployment pipelines.
- Operate security-as-a-service platforms (e.g., secrets management, certificate lifecycles).
- Design and operate certificate lifecycles (X.509, SSH) for secure machine-to-machine trust.
- Contribute to identity-centric access control systems, focusing on Just-In-Time (JIT) access, Zero Trust, and automated authorization policies.
- Secure core network foundations, including global DNS, service discovery, and network authentication.
- Design and maintain authentication controls for network infrastructure.
- Partner with infrastructure, platform, and SRE teams to identify and remediate security gaps.
Requirements
- 5-8 years of hands-on experience in infrastructure engineering, SRE, or security engineering.
- Deep understanding of security principles across the stack, from Linux and container runtimes to cloud control planes.
- Proven experience using Infrastructure-as-Code (Terraform) to manage complex infrastructure.
- Strong knowledge of cryptography, secrets management, PKI, and modern authentication standards.
- Experience securing public cloud (AWS, GCP) and/or bare-metal environments.
- Strong networking fundamentals, including routing, segmentation, firewalls, and Zero Trust architectures.
- Hands-on experience with Kubernetes and container security.
- Fluency in at least one programming language (Go or Python preferred) for automation and tooling.
Benefits
- Pension contributions
- Private health and dental insurance
- Income protection
- Life assurance